Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
File:                     vfo6-DmqHc51j0ieLTGuIgkvyZo.mft (raw, json)
Hash identifier:          o2r6BAZFDGkjuCe13dGcmmeILcCThvWCgDJ1zScNMAo=
Subject key identifier:   46:72:66:F5:E7:72:5D:90:9A:CF:D6:DF:E3:BC:F3:CA:9D:F4:8B:9E
Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
Certificate issuer:       /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Certificate serial:       01A11A50D4B61BD663A31854EC3B4002AD39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
Manifest number:          1A96
Signing time:             Thu 08 Oct 2026 07:01:07 +0000
Manifest this update:     Thu 08 Oct 2026 07:01:07 +0000
Manifest next update:     Fri 09 Oct 2026 07:01:07 +0000
Files and hashes:         1: BgsKeB31VXHMATBr99GvZxAD6LE.roa (hash: JiKvS9bV+6H9nQ9YSMIo96/vZsQgIkUF+T9itNOZVio=)
                          2: LnQ-zPzgqVgXUijx46r1d0YDiYg.roa (hash: KK6oyN4swqYMOPL8Gp/QIITc1me7ju9UH/GTlCJypo0=)
                          3: OIEYZhMWNxTqwPFPtrJQP_P_8kc.roa (hash: oh65h6lMRU5dPAsjnmn6axHzKgGM8bi/szblqT+O4Kc=)
                          4: SDgL2DcW067zsQwIkMGp0Q7DumQ.roa (hash: M7FnxKdjUg7dQJ1DNiK4qvZZAUkfItNkGPtKgFWqy4Q=)
                          5: vfo6-DmqHc51j0ieLTGuIgkvyZo.crl (hash: IQ+WuuoKbgttRwf0Matb81fLiwRPoP48w4SIG0wzSJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:50:d4:b6:1b:d6:63:a3:18:54:ec:3b:40:02:ad:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
        Validity
            Not Before: Oct  8 07:01:07 2026 GMT
            Not After : Oct  9 07:01:07 2026 GMT
        Subject: CN=467266f5e7725d909acfd6dfe3bcf3ca9df48b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:43:63:8e:dc:60:b5:07:2c:f6:5c:75:e0:
                    fe:52:be:b0:75:23:b3:11:b5:cf:12:d7:72:78:f9:
                    a6:fa:3a:ec:93:b4:27:4f:22:26:b0:a6:da:72:1a:
                    48:ac:96:0b:a2:4b:19:0b:d8:36:d5:72:b3:52:3f:
                    2a:32:0c:c2:4f:ba:1d:71:b0:0b:4f:0d:80:f3:ae:
                    b2:51:5b:09:9f:80:fe:7c:e4:99:0a:f0:b5:f6:04:
                    98:60:2c:56:4b:21:32:b8:c0:db:5c:c3:ab:a1:d5:
                    a3:a3:fe:1e:88:1d:bc:67:12:72:15:5a:0e:00:4f:
                    af:39:d2:61:71:66:64:3e:33:30:90:82:e2:18:8d:
                    4b:c2:d8:54:56:35:77:2f:14:11:82:29:a9:f5:19:
                    81:20:f5:19:76:cb:99:64:d4:3e:a1:8d:47:c0:1d:
                    d2:a2:1f:62:02:12:1a:b6:6d:69:e6:da:ec:b0:d3:
                    68:2c:c8:52:4c:78:97:08:12:c8:ba:a3:88:b1:ed:
                    94:c5:4b:22:d5:3b:ca:2e:6d:1c:bb:b0:ea:bb:b2:
                    60:94:13:e0:04:4c:60:1c:8c:6b:4c:bc:35:7c:5a:
                    09:65:39:fa:52:b3:7a:fa:df:dc:75:e1:ad:b9:4b:
                    e3:bc:95:02:83:a9:50:5e:fd:74:42:ce:a2:9e:08:
                    58:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:72:66:F5:E7:72:5D:90:9A:CF:D6:DF:E3:BC:F3:CA:9D:F4:8B:9E
            X509v3 Authority Key Identifier:
                keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:e6:ca:1a:d1:05:f4:5a:14:b7:08:67:13:56:7d:7e:21:0d:
         59:78:d3:d3:89:b9:e9:64:5d:9b:91:8a:72:16:b4:c3:42:90:
         01:96:97:0a:ef:e4:48:2f:08:49:06:d1:d3:95:aa:8c:50:5e:
         6d:e0:00:35:d8:42:d4:59:b5:4f:9f:dd:43:97:1b:b1:01:a2:
         0e:56:76:af:9d:fe:2f:ab:44:95:91:ef:f7:c7:7b:95:e3:f2:
         d7:93:83:96:90:95:31:fd:cb:6e:fb:22:ad:5d:29:21:28:72:
         66:c1:11:7c:5c:77:fd:bf:b8:de:19:33:96:db:49:d9:0e:65:
         4f:1a:a2:ae:e4:99:7d:03:4a:e9:de:35:04:8b:19:a6:a5:c3:
         45:db:6b:4d:4e:18:23:b9:4e:dd:f6:e3:64:00:8d:26:08:02:
         05:86:44:d1:9e:5e:50:48:2a:3e:47:da:fe:8c:f4:d2:f8:49:
         d1:b2:15:a3:6f:6f:65:1f:a0:65:ae:a7:02:9e:21:c4:31:00:
         d0:a1:29:b4:80:f0:ff:b2:9f:84:36:f7:37:bf:bf:f8:da:b0:
         3c:fb:4a:5a:20:04:5e:7a:e4:95:cd:fe:94:d6:db:8c:f5:2d:
         2d:d1:c3:71:f3:17:d9:26:23:c5:59:4e:ac:f7:d6:7d:b2:fe:
         00:93:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:43:13 2026 by rpki-client